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CLAIMS : 

What is claimed is: 

1. A method in a data processing system for providing 
access to Vesources within the data processing system, 
the method\comprising the data processing system 
implemented\ steps of : 

receiviVig a request from a requestor to access a 

resource in the data processing systems- 
sending a first cookie to the requestor in response 

to the requesn, wherein the cookie is used to access the 

resource; \ 

storing an\ identification of the requestor and the 

cookie to form a stored identification and a stored 

cookie; \ 

responsive no receiving a second cookie from a 

source, comparing\an identification of the source and the 

second cookie witM the stored identification and the 

stored cookie; and\ 

responsive to W match between the identification of 

the source and the aecond cookie and the stored 

identification and the stored cookie, allowing access to 

the resource . \ 

2. The method of claim 1, wherein access to the 
resource is allowed by accepting the second cookie. 

3. The method of claim \l further comprising: 
responsive to an absence of a match between the 

identification of the sourW and the second cookie and 
the stored identification and the stored cookie, 
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rejectirJg the second cookie. 

4. The method of claim 1, wherein the resource is a 
file and tne first cookie identifies disk location of the 

5 file. 

5. The metl\od of claim 1, wherein the source is a web 
server . 



10 6. The method of claim 1, wherein the step of storing 
an identification of the source and the first cookie to 
form a stored identification and a stored cookie 
comprises : 

storing the identification of the source and the 
15 first cookie in a dache. 

7. The method of claim 6, wherein the identification is 
an Internet protocol address. 



D 



20 8. The method of claim 1, wherein the steps of 

receiving, sending, stoi^ng, comparing, and allowing are 
performed in a browser. 



9. The method of claim l.\ wherein the resource is a 
25 file having a path and further comprising: 

generating a disk location number from the path; and 
placing the disk locatiop number into the first 

cookie . 



30 10. A method in a data processing system for processing 
a cookie, the method comprising Vhe data processing 
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system implemented steps of: 

receiving\a request from a source to access a 
resource in the\ data processing system; 

sending a Aookie to the source to form a sent 
cookie, wherein nhe sent cookie is used to access the 
resource; \ 

responsive to\ receiving a subsequent cookie, 
authenticating the \subsequent cookie with the cookie; and 

responsive to authenticating the subsequent cookie, 
allowing access to tne resource. 

11. The method of claim 10 further comprising: 

storing the sent cookie and an identification of the 
source. \ 

12. The method of claim 10, wherein the sent cookie and 
the identification of the source are stored in a cache. 

13. The method of claim iS2 , wherein the identification 
is a stored identification \and wherein the authenticating 
step comprises: \ 

comparing the stored identification with an 
identification of a source for the subsequent cookie; and 

comparing the sent cookie with the subsequent 
cookie. \ 

14. The method of claim 10, wherein the source is a Web 
server . \ 

15. The method of claim 10, wherein the resource is a 
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16. The meOhod of claim 15, wherein the cookie includes 
a disk location of the file. 

17. A data prpcessing system comprising: 
a cache; 

a cookie management process, wherein the cookie 
management process generates a cookie in response to 
receiving a request to access a resource within the data 
processing system\from a requestor; sends the cookie to 
the requestor, stoVes the cookie and an identification of 
the requestor in the cache; responsive to being presented 
a received cookie from a source, compares the cookie and 
the identification o\e the requestor to the received 
cookie and the sourc^; and allows access to the resource 
in response to a matc)^ between the cookie and the 
identification of the \requestor with the received cookie 
and the source. 

18. The data processing system of claim 17, wherein the 

19. The data processing i^stem of claim 17, wherein the 
resource is a file. 

20. The data processing sys\tem of claim 17, wherein the 
identification of the requestor and the identification of 
the source are Internet protocol addresses. 



21. A data processing system sor providing access to 
resources within the data processing system, the data 
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processing system comprising: 

receiving means for receiving a request from a 
requestor to access a resource in the data processing 
system; \ 

sending means for sending a first cookie to the 
requestor, wherein the first cookie is used to access the 
resource; \ 

storing means for storing an identification of the 
requestor and the\first cookie to form a stored 
identification and\ a stored cookie; 

comparing means, responsive to receiving a second 
cookie from a source, for comparing an identification of 
the source and the second cookie with the stored 
identification and the stored cookie; and 

allowing means, responsive to a match between the 
identification of the source and the second cookie and 
the stored identification and the stored cookie, for 
allowing access to the resource. 

22. The data processing system of claim 21, wherein 
access to the resource is Wllowed by accepting the second 
cookie. \ 

23. The data processing syatem of claim 21 further 
comprising: \ 

rejecting means, responsWe to an absence of a match 
between the identification of \the source and the second 
cookie and the stored identification and the stored 
cookie, for rejecting the secona cookie. 



24. The data processing system 



claim 21, wherein the 
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resource is a file and the first cookie identifies disk 
location of the file. 

25. The aata processing system of claim 21, wherein the 
source is a web server. 

26. The datH processing system of claim 21, wherein the 
storing meansV for storing an identification of the source 
and the first Rookie to form a stored identification and 
a stored cookiA comprises : 

storing means for storing the identification of the 
source and the fxrst cookie in a cache. 

27. The data processing system of claim 26, wherein the 
identification is an Internet protocol address. 

28. The data processing system of claim 21, wherein the 
receiving means, sending means, storing means, comparing 
means, and allowing means are performed in a browser. 

29. The data processing system of claim 21, wherein the 
resource is a file having a path and further comprising: 

generating means for generating a disk location 
number from the path; and \ 

placing means for placing the disk location number 
into the first cookie. \ 

30. A data processing system for processing a cookie, 
the data processing system comprising: 

receiving means for receivingy a request from a 
source to access a resource in the nata processing 
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systtem; / 

pending means for sending a cookie to the source to 

form aNsent cookie, wherein the sent cookie is used to 

access the resources- 
authenticating means, responsive to receiving a 

subsequent Vookie, for authenticating the subsequent 

cookie with Vhe cookie; and 

allowing\means, responsive to authenticating the 

subsequent cookie, for allowing access to the resource. 

31. The data processing system of claim 30 further 
comprising: \ 

storing means ^or storing the sent cookie and an 
identification of the source. 

32. The data processing system of claim 30, wherein the 
sent cookie and the iderrtif ication of the source are 
stored in a cache. \ 

33. The data processing syatem of claim 32, wherein the 
identification is a stored identification and wherein the 
authenticating means comprises\ 

first comparing means for cK:>mparing the stored 
identification with an identification of a source for the 
subsequent cookie ; and \ 

second comparing means for comWring the sent cookie 
with the subsequent cookie. \ 

34. The data processing system of claiin 30, wherein the 
source is a Web server. \ 
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35. \ The data processing system of claim 30, wherein the 
resoirrce is a file. 

36. Tne data processing system of claim 35, wherein the 
cookie includes a disk location of the file. 

37. A computer program product in a computer readable 
medium for providing access to resources within the data 
processing s^^stem, the computer program product 
comprising: \ 

first inatructions for receiving a request from a 
requestor to aqjcess a resource in the data processing 
system; \ 

second instVructions for sending a first cookie to 
the requestor, wherein the first cookie is used to access 
the resource; \ 

third instruations for storing an identification of 
the requestor and the first cookie to form a stored 
identification and a stored cookie; 

fourth instructions, responsive to receiving a 
second cookie from a\ source, for comparing an 
identification of the source and the second cookie with 
the stored identification and the stored cookie; and 

fifth instructions, responsive to a match between 
the identification of nhe source and the second cookie 
and the stored identification and the stored cookie, for 
allowing access to the resource. 

38. A computer program product in a computer readable 
mediiam for processing a co©kie, the computer program 
product comprising: \ 
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firsst instructions for receiving a request from a 
source toV access a resource in the data processing 
system; \ 

seconoy instructions for sending a cookie to the 
source to foW a sent cookie, wherein the sent cookie 
used to access, the resource; 

third instructions, responsive to receiving a 
subsequent cookie., for authenticating the subsequent 
cookie with the cobkie; and 

fourth instructions, responsive to authenticating 
the subsequent cookiA for allowing access to the 
resource. \ 



